$ rpki-client -vvf rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft File: ddMZaVabXA3w2lOz2TE2YzRyEII.mft (raw, json) Hash identifier: ZWYWzlwDEYlEJDHIpzNiqVSWm+tz/2GH0t87LO2G15Y= Subject key identifier: 1B:B3:9A:B0:32:04:45:E8:00:A7:8A:B5:E4:57:3D:D4:93:C4:EB:43 Authority key identifier: 75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 Certificate issuer: /CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft Manifest number: 0133 Signing time: Wed 05 Nov 2025 04:42:39 +0000 Manifest this update: Wed 05 Nov 2025 04:42:38 +0000 Manifest next update: Wed 12 Nov 2025 04:42:38 +0000 Files and hashes: 1: ddMZaVabXA3w2lOz2TE2YzRyEII.crl (hash: QP1yVcHH72KcG1boSP1jf5LvJs4QOYtVkhmMaqNizwI=) 2: 4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa (hash: Ga1jsRYecaBQWadBOEJf3Y9akBHnUgs+85T4mwwYjp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E5DF, serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Validity Not Before: Nov 5 04:42:38 2025 GMT Not After : Nov 12 04:42:38 2025 GMT Subject: CN=690ad5be-6811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c5:11:09:03:b9:ff:cd:ed:00:0d:0c:60:ea: b9:c3:12:1d:38:5f:08:f2:f3:9b:3a:79:75:65:34: 8b:cc:2a:45:91:fa:a9:bc:ab:2d:f3:15:3a:bd:26: 17:fe:62:c8:59:00:28:bd:da:e4:11:96:a0:9d:95: 30:68:a5:55:e9:f4:38:46:e9:f5:9e:f9:45:cd:34: 15:ed:92:6f:77:35:9e:d3:37:fd:93:1e:89:72:20: 00:51:a7:b2:62:6c:58:f9:b4:48:54:44:e5:57:6a: d9:a5:87:77:0c:2b:9a:1a:b6:63:65:54:5b:c0:ae: d4:02:70:da:47:8b:20:97:c1:7c:8e:f3:d8:f5:14: 9a:78:81:e0:87:13:d4:75:47:a8:4e:1f:af:49:5a: a7:af:84:50:19:6a:18:fa:be:de:f2:c3:dc:b5:35: 77:16:dc:f1:a9:33:db:f9:6f:54:43:05:5a:cf:39: 42:9f:21:95:a1:bf:bf:9f:07:e7:dd:d2:2c:45:c0: 3e:09:7d:44:e3:bc:10:14:29:31:28:09:bb:71:43: 4d:74:03:6a:0a:ec:20:9b:af:3e:57:7a:36:72:60: ec:69:c7:72:c6:60:ea:e7:eb:ef:6b:1b:29:87:34: 1b:7f:dc:ad:e8:c9:d5:85:c5:d6:06:4e:f4:21:06: 94:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B3:9A:B0:32:04:45:E8:00:A7:8A:B5:E4:57:3D:D4:93:C4:EB:43 X509v3 Authority Key Identifier: keyid:75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:e8:66:64:6c:d4:ad:f8:71:c1:0c:10:5d:6c:c3:a1:9f:70: b8:87:dc:ba:f6:a0:c5:cf:b2:01:7a:d6:85:e6:3a:de:c1:2b: 09:1e:01:9d:a8:e7:16:f6:ee:ae:98:30:40:87:57:f1:78:a4: 65:24:ce:d0:15:65:5d:3b:15:1f:19:76:6a:0d:19:58:45:28: 24:a1:b8:57:09:4f:2e:84:8e:2a:c2:73:5d:12:85:97:63:96: 3b:c1:52:a2:24:78:b8:84:7c:c9:c5:43:44:7d:38:5c:c3:2c: 58:28:75:e0:8e:f8:64:9f:4a:3b:5b:4c:6f:f8:93:a7:85:17: 55:fe:d3:3f:06:51:d3:15:0a:99:23:1c:28:67:d3:d2:e4:46: 1f:68:f8:27:18:e1:bd:c0:1b:78:ec:bc:3c:7d:1e:fb:be:81: 20:ba:c3:96:b2:cd:5e:71:5d:e8:37:70:bb:bf:a4:43:46:e1: 80:17:43:4f:ff:de:71:49:6d:e9:9a:fc:1b:17:f0:cb:c7:25: df:9c:64:30:82:2e:96:03:3e:a3:2c:a7:7d:13:57:eb:4c:af: 3a:59:97:89:90:b9:76:d9:97:cb:8f:3e:5d:42:83:1e:0e:2d: 79:b2:6b:54:6e:45:f1:92:52:14:74:6a:45:28:17:14:c0:1c: 2c:da:4a:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU1REYxMTAvBgNVBAUTKDc1RDMxOTY5NTY5QjVDMERGMERBNTNCM0Q5MzEzNjYz MzQ3MjEwODIwHhcNMjUxMTA1MDQ0MjM4WhcNMjUxMTEyMDQ0MjM4WjAYMRYwFAYD VQQDEw02OTBhZDViZS02ODExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3sURCQO5/83tAA0MYOq5wxIdOF8I8vObOnl1ZTSLzCpFkfqpvKst8xU6vSYX /mLIWQAovdrkEZagnZUwaKVV6fQ4Run1nvlFzTQV7ZJvdzWe0zf9kx6JciAAUaey YmxY+bRIVETlV2rZpYd3DCuaGrZjZVRbwK7UAnDaR4sgl8F8jvPY9RSaeIHghxPU dUeoTh+vSVqnr4RQGWoY+r7e8sPctTV3FtzxqTPb+W9UQwVazzlCnyGVob+/nwfn 3dIsRcA+CX1E47wQFCkxKAm7cUNNdANqCuwgm68+V3o2cmDsacdyxmDq5+vvaxsp hzQbf9yt6MnVhcXWBk70IQaU2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuzmrAy BEXoAKeKteRXPdSTxOtDMB8GA1UdIwQYMBaAFHXTGWlWm1wN8NpTs9kxNmM0chCC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTVERi9DQkVGQ0Q5Q0U2 NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhBM3cybE96MlRFMll6UnlF SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkTVphVmFiWEEzdzJsT3oyVEUyWXpSeUVJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTVERi9DQkVGQ0Q5Q0U2NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhB M3cybE96MlRFMll6UnlFSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/6GZkbNSt+HHBDBBdbMOhn3C4h9y69qDFz7IBetaF5jrewSsJHgGd qOcW9u6umDBAh1fxeKRlJM7QFWVdOxUfGXZqDRlYRSgkobhXCU8uhI4qwnNdEoWX Y5Y7wVKiJHi4hHzJxUNEfThcwyxYKHXgjvhkn0o7W0xv+JOnhRdV/tM/BlHTFQqZ IxwoZ9PS5EYfaPgnGOG9wBt47Lw8fR77voEgusOWss1ecV3oN3C7v6RDRuGAF0NP /95xSW3pmvwbF/DLxyXfnGQwgi6WAz6jLKd9E1frTK86WZeJkLl22ZfLjz5dQoMe Di15smtUbkXxklIUdGpFKBcUwBws2kon -----END CERTIFICATE-----Generated at Wed Nov 5 07:59:43 2025 by rpki-client